In hasAccountsOnAnyUser of DevicePolicyManagerService.java, there is a possible way to add a Device Owner after provisioning due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
Published: 2025-12-08
CVSS: 5.5
CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Download Exploit for CVE-2025-48633 here:
Use Tor Browser to access .onion links.
Check our team here:
https://wednesfieldacademy.com/exploit-86-cve-2025-4575/
https://wednesfieldacademy.com/exploit-743-cve-2023-1077/
https://wednesfieldacademy.com/exploit-709-cve-2021-37137/
